Privacy Policy

DaunenStep Spa
Via Principale, 7
Renon/Auna di Sotto
info@daunenstep.it

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of the access, the amount of data transferred, and the requesting provider (access data), and documents the access. These access data are evaluated exclusively for the purpose of ensuring a smooth operation of the site and improving our offer. This serves to protect our legitimate interests in a proper presentation of our offer pursuant to Art. 6 (1) sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after your visit to the site.

The services for hosting and displaying the website are partially provided by our service providers as part of a processing operation on our behalf. Unless otherwise specified in this privacy policy, all access data and all data collected through the forms on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

2. Data Processing for Contract Handling and Contacting Us

2.1 Data Processing for Contract Fulfillment

In order to process the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide them to us in the context of your order. Mandatory fields are marked as such because in these cases we need the data to process the contract and cannot send the order without them. The data collected can be seen in the respective input forms.

Further information on the processing of your data, in particular the transfer to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After complete fulfillment of the contract, your data will be restricted for further processing and deleted after the expiration of the tax and commercial retention periods pursuant to Art. 6 (1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

Data privacy statement

2.2 Customer Account

If you have given your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for the purpose of opening the account and storing your data for future purchases on our website. You can delete your customer account at any time either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your account, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this privacy policy.

2.3 Contacting Us

As part of customer communication, we collect personal data pursuant to Art. 6 (1) sentence 1 lit. b GDPR when you voluntarily provide them to us when contacting us (e.g. via contact form or email). Mandatory fields are marked as such because in these cases we need the data to process your contact request. The specific data collected is evident from the respective input forms. After your request has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this privacy policy.

Live Chat Tool WhatsApp

For the purpose of customer communication, we use the live chat tool from WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“WhatsApp”). This serves to protect our legitimate interest in effective and improved customer communication pursuant to Art. 6 (1) sentence 1 lit. f GDPR. WhatsApp acts on our behalf. The phone numbers stored on our mobile device are automatically processed on servers of WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Only phone numbers of customers who have contacted us via WhatsApp and have therefore already accepted WhatsApp's terms of use and privacy policy are stored. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission.

3. Data Processing for Shipping Purposes

In order to fulfill the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR, we pass your data on to the shipping service provider commissioned with the delivery, to the extent that this is necessary for the delivery of ordered goods.

Data transfer to shipping providers for shipment notification purposes

If you have given us your express consent during or after your order pursuant to Art. 6 (1) sentence 1 lit. a GDPR, we will forward your phone number to the selected shipping provider so that they can contact you prior to delivery to announce or coordinate delivery.

You can revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping provider at the contact address listed below. After revocation, we will delete your data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this privacy policy.

BRT
Via E. Mattei 42
40138 Bologna
Italy

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

4. Data Processing for Payment Handling

For the processing of payments in our online shop, we work with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers acting on our behalf, or to the commissioned credit institutions or the selected payment service provider, to the extent that this is necessary for processing the payment. This serves the fulfillment of the contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g. via their own website or through a technical integration in the ordering process. The respective privacy policy of the payment service provider applies in this case.

If you have questions about our payment partners and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes

We may provide our service providers with additional data, which they use together with the data necessary for processing the payment, as our processors for the purpose of fraud prevention and optimization of our payment processes (e.g., invoicing, handling disputed payments, support for accounting). This is done in accordance with Art. 6(1)(f) GDPR to safeguard our overriding legitimate interests in protection against fraud and efficient payment management.

4.3 Identity and Credit Checks When Selecting Klarna Payment Services

Klarna Installment Purchase

If you choose to use the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"), we request your consent pursuant to Art. 6(1)(a) GDPR to transmit the necessary data for payment processing as well as identity and credit checks to Klarna. In Germany, the credit agencies named in Klarna’s privacy policy may be used for identity and credit checks. Klarna uses the information received on the statistical probability of default to make a balanced decision on the establishment, execution or termination of the contractual relationship. You may revoke your consent at any time by sending a message to the contact details mentioned in this privacy policy. This may result in us being unable to offer you certain payment options. You may also revoke your consent to this data usage directly with Klarna.

5. Advertising by Email

5.1 Email Newsletter with Subscription

If you subscribe to our newsletter, we use the data required for this purpose or provided separately by you to send you our email newsletter regularly based on your consent in accordance with Art. 6(1)(a) GDPR. You can unsubscribe from the newsletter at any time either by sending a message to the contact described below or via a link provided in the newsletter. After unsubscribing, we will delete your email address from the distribution list unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use your data for further purposes permitted by law and about which we inform you in this declaration.

5.2 Newsletter Distribution

The newsletter may also be sent by our service providers within the scope of processing on our behalf. For questions about our service providers and the basis of our cooperation with them, please contact the option described in this privacy policy.

Our service providers are based and/or use servers in the USA and other non-EU/non-EEA countries. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on the standard data protection clauses of the European Commission.

6. Cookies and Other Technologies

General Information

In order to make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the browser session ends, i.e., after closing your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

We use such technologies that are strictly necessary for the use of certain functions of our website (e.g., shopping cart functionality). These technologies collect and process IP address, time of visit, device and browser information, and information about your use of our website (e.g., shopping cart contents). This is based on our overriding legitimate interests in an optimized presentation of our offering in accordance with Art. 6(1)(f) GDPR.

We also use technologies to fulfill legal obligations (e.g., to demonstrate consent to the processing of your personal data), as well as for web analytics and online marketing. More information, including the legal basis for data processing, can be found in the following sections of this privacy policy.

Cookie settings for your browser can be found at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of the technologies pursuant to Art. 6(1)(a) GDPR, you can revoke your consent at any time by sending a message to the contact described in this privacy policy.

7. Use of Cookies and Other Technologies for Web Analysis and Advertising Purposes

If you have given your consent pursuant to Art. 6(1)(a) GDPR, we use the following cookies and other technologies from third-party providers on our website. After the purpose has ceased and the use of the respective technology has ended, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. For more information about your revocation options, please see the section "Cookies and Other Technologies." Further information, including the basis of our cooperation with the individual providers, can be found under each technology. For questions about the providers and the basis of our cooperation with them, please contact the option described in this privacy policy.

7.1 Use of Google Services for Web Analytics and Advertising Purposes

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information collected automatically through Google technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses adopted by the European Commission. If your IP address is collected via Google technologies, it is shortened before being stored on Google servers by enabling IP anonymization. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there. Unless otherwise stated for individual technologies, data processing is carried out based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy policy.

Google Analytics

For the purpose of website analysis, data (IP address, time of visit, device and browser information, and information about your use of our website) is automatically collected and stored using Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not combined with other data from Google. Data processing is carried out based on a data processing agreement with Google.

For optimized marketing of our website, we have activated the data sharing settings for "Google products and services". This allows Google to access and use the data collected and processed by Google Analytics to improve Google services. This data sharing with Google is based on an additional agreement between controllers. We have no influence on subsequent data processing by Google.

For optimized marketing of our website, we use the so-called User-ID function. This allows us to assign a unique, permanent ID to your interaction data across one or more sessions on our online presence and to analyze your user behavior across devices and sessions.

For web analysis, the Google Analytics extension Google Signals enables so-called "cross-device tracking". If your internet-enabled devices are linked to your Google account and you have activated the "personalized advertising" setting in your Google account, Google can generate reports on your usage behavior (especially cross-device user numbers), even if you switch devices. We do not process personal data in this context; we only receive statistics generated by Google Signals.

For web analysis and advertising purposes, the Google Analytics extension DoubleClick cookie enables recognition of your browser when visiting other websites. Google will use this information to compile reports on website activities and to provide further services associated with website usage.

Google AdSense

Our website markets advertising space via Google AdSense for ads from third parties. These ads are displayed in various places on our website. The DoubleClick cookie enables the display of interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website) and the automatic assignment of a pseudonymous user ID, which helps determine interests based on visits to this and other websites.

Google Ads

For advertising purposes in Google search results and on third-party websites, the Google Remarketing cookie is set when you visit our website. This enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website) and through a pseudonymous cookie ID and based on the pages you visit. Further data processing occurs only if you have activated the "personalized advertising" setting in your Google account. If you are logged into your Google account during your visit to our website, Google will use your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we measure your subsequent usage behavior via Google Ads Conversion Tracking when you reach our website through a Google Ads advertisement. Cookies may be used and data (IP address, time of visit, device and browser information, and information about your use of our website based on predefined events such as visiting a page or signing up for a newsletter) collected, from which usage profiles are created using pseudonyms.

Google Maps

To visually display geographic information, Google Maps collects data about your use of the Maps features, in particular your IP address and location data, which is transmitted to and processed by Google. We have no influence on this subsequent data processing.

YouTube Video Plugin

To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube Video Plugin in the extended data protection mode we use, transmitted to Google, and processed by Google, but only if you play a video.

7.2 Use of Microsoft Services for Web Analytics and Advertising Purposes

We use the technologies described below from Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”). Data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR. The information automatically collected through Microsoft technologies about your use of our website is generally transmitted to a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses adopted by the European Commission. Further information on data processing by Microsoft can be found in Microsoft’s privacy policy.

Microsoft Advertising

For advertising purposes in Bing, Yahoo and MSN search results and on third-party websites, the Microsoft Advertising Remarketing cookie is set when you visit our website. This enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website) and through a pseudonymous cookie ID and based on the pages you visit.

For website analysis and event tracking, we measure your subsequent usage behavior via Microsoft Advertising Universal Event Tracking (UET) when you reach our website through a Microsoft Advertising ad. Cookies may be used and data (IP address, time of visit, device and browser information, and information about your use of our website based on predefined events such as visiting a page or subscribing to a newsletter) collected, from which usage profiles are created using pseudonyms. If your internet-enabled devices are linked to your Microsoft account and you have not disabled the “Interest-Based Advertising” setting in your Microsoft account, Microsoft may generate reports about your usage behavior (especially cross-device user numbers) even if you switch devices, so-called “Cross-Device Tracking.” We do not process personal data in this context; we only receive statistics generated based on Microsoft UET.

7.3 Use of Facebook Services for Web Analytics and Advertising Purposes

Use of Facebook Pixel

We use the Facebook Pixel within the scope of the technologies described below from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website based on predefined events such as visiting a page or subscribing to a newsletter), from which usage profiles are created using pseudonyms. Within the scope of the so-called extended data matching, additional data is collected and stored in hashed form for matching purposes, which can be used to identify individuals (e.g. names, email addresses, and telephone numbers). When visiting our website, a cookie is automatically set by the Facebook Pixel, enabling recognition of your browser when visiting other websites via a pseudonymous cookie ID. Facebook combines this information with additional data from your Facebook account and uses it to compile reports about website activity and to provide further services related to website usage, particularly personalized and group-based advertising.

The information automatically collected by Facebook technologies about your use of our website is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. If data is transferred to the USA under our responsibility, our cooperation is based on standard data protection clauses adopted by the European Commission. Further information on data processing by Facebook can be found in Facebook’s privacy policy.

Facebook Analytics

As part of Facebook Analytics, statistics about visitor activity on our website are created from the data collected by the Facebook Pixel about your use of our website. Data processing is carried out based on a data processing agreement with Facebook. The analysis serves the optimal presentation and marketing of our website.

Through Facebook Ads, we advertise this website on Facebook and on other platforms. We determine the parameters of each advertising campaign. Facebook is responsible for the exact implementation, especially for the placement of the ads with individual users. Unless otherwise stated for the individual technologies, data processing is carried out based on an agreement between joint controllers pursuant to Art. 26 GDPR. The joint responsibility is limited to the collection of the data and its transfer to Facebook Ireland. Subsequent data processing by Facebook Ireland is not included.

Based on the statistics created via the Facebook Pixel about visitor activity on our website, we conduct group-based advertising via Facebook Custom Audience by determining the characteristics of the respective target group. As part of the extended data matching that takes place to define the respective target group (see above), Facebook acts as our processor.

Based on the pseudonymous cookie ID set by the Facebook Pixel and the data collected about your usage behavior on our website, we conduct personalized advertising via Facebook Pixel Remarketing.

Via Facebook Pixel Conversions, we measure your subsequent usage behavior for web analysis and event tracking when you reach our website through a Facebook Ads advertisement. Data processing is carried out based on a data processing agreement with Facebook.

7.4 Other Providers of Web Analytics and Online Marketing Services

Use of Hotjar for Web Analytics

For the purpose of website analytics, data (IP address, time of visit, device and browser information, as well as information about your use of our website) is automatically collected and stored using technologies from Hotjar Ltd., Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 3155, Malta (“Hotjar”), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymized usage profiles are not combined with personal data about the bearer of the pseudonym without separate, explicit consent. Hotjar acts on our behalf as our processor.

8. Integration of the Trusted Shops Trustbadge/Other Widgets

To display Trusted Shops services (e.g. Trustmark, collected reviews) and to offer Trusted Shops products to buyers after an order, Trusted Shops widgets (e.g. Trusted Shops Trustbadge) are integrated on this website.

This serves to safeguard our overriding legitimate interests in the optimal marketing of our offer by enabling a secure purchase according to Art. 6(1)(f) GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne (Trusted Shops), with whom we are jointly responsible for data protection according to Art. 26 GDPR. We inform you in the following about the essential content of the agreement pursuant to Art. 26(2) GDPR.

The Trustbadge is provided as part of joint responsibility by a US-based CDN provider (Content Delivery Network). An appropriate level of data protection is ensured by standard data protection clauses and additional contractual measures. Further information on data protection at Trusted Shops GmbH can be found here.

When the Trustbadge is called up, the web server automatically saves a so-called server log file which also contains your IP address, date and time of access, amount of data transferred and the requesting provider (access data), and documents the retrieval. The IP address is anonymized immediately after collection, so that the stored data cannot be assigned to you personally. The server log file is stored in a security database for the analysis of security anomalies and is automatically deleted or anonymized no later than 90 days after creation. This is done according to Art. 6(1)(f) GDPR to safeguard the legitimate interests of us and Trusted Shops in the prevention of abuse and fraud, optimization of offers and websites, and ensuring the trouble-free operation of the website or the Trustbadge and other Trusted Shops widgets.

Further personal data is transmitted to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you are already registered for use. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered for product use is automatically checked using a neutral parameter – the hashed email address using a cryptological one-way function. The email address is converted before transmission into a hash value that cannot be decrypted by Trusted Shops. After checking for a match, the parameter is automatically deleted.

This serves to check whether you are already registered for services at Trusted Shops GmbH and is therefore necessary to fulfill our and Trusted Shops' overriding legitimate interests in the provision of buyer protection linked to the specific order and the transactional review services in accordance with Art. 6(1)(f) GDPR. If this is the case, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered, you will be offered the opportunity to register for the first time afterwards. Further processing after registration will also be governed by the contractual agreement with Trusted Shops. If you do not register, all transmitted data will be automatically deleted by Trusted Shops and a personal reference will then no longer be possible.

In the context of the joint responsibility between us and Trusted Shops GmbH, please preferably contact Trusted Shops GmbH for data protection inquiries and to assert your rights. The contact options can be found here. Further information on data protection is also available via the following link. Regardless, you can always contact us via the contact details provided in this privacy policy. Your inquiry will then, if necessary, be forwarded to the respective responsible party.

9. Social Media

Our online presence on Facebook, Instagram, YouTube, Pinterest, LinkedIn

If you have given your consent pursuant to Art. 6(1)(a) GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms mentioned above. From this data, usage profiles are created using pseudonyms. These can be used, for example, to display advertisements inside and outside the platforms that are presumed to match your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the respective social media provider as well as your rights and privacy protection settings, please refer to the privacy policies of the respective providers linked below. If you still need assistance, you can contact us.

Facebook is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland about your use of our Facebook online presence is usually transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with Facebook is based on standard data protection clauses adopted by the European Commission. Data processing during a visit to a Facebook fan page is carried out based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (about Insights data) can be found here.

Instagram is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland about your use of our Instagram online presence is usually transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with Facebook is based on standard data protection clauses adopted by the European Commission. Data processing during a visit to an Instagram fan page is carried out based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (about Insights data) can be found here.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our YouTube online presence is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with Google is based on standard data protection clauses adopted by the European Commission.

Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). The information automatically collected by Pinterest about your use of our Pinterest online presence is usually transmitted to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with Pinterest is based on standard data protection clauses adopted by the European Commission.

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn about your use of our LinkedIn online presence is usually transmitted to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with LinkedIn is based on standard data protection clauses adopted by the European Commission.

10. Contact Options and Your Rights

10.1 Your Rights

As a data subject, you have the following rights:

In accordance with Art. 15 GDPR, the right to obtain access to your personal data processed by us to the extent described therein;

In accordance with Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate or incomplete personal data stored by us;

In accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation;
  • for reasons of public interest; or
  • for the establishment, exercise or defence of legal claims;

In accordance with Art. 18 GDPR, the right to request restriction of processing of your personal data where

  • you contest the accuracy of the data;
  • the processing is unlawful but you oppose its erasure;
  • we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
  • you have objected to processing pursuant to Art. 21 GDPR;

In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;

In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. You can generally contact the supervisory authority at your usual place of residence or workplace, or our company headquarters.

Right to Object

Where we process personal data as explained above in order to safeguard our legitimate interests that prevail in the context of a balancing of interests, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation.

Once you have exercised your right to object, we will not process your personal data for those purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for such purposes.

10.2 Contact Options

If you have any questions about the collection, processing or use of your personal data, or if you require information, correction, restriction or deletion of data, as well as revocation of consents given or objection to a particular use of data, please contact us directly using the contact details provided in our legal notice.

Data Protection Officer:

Marius Eccel
Hauptstraße 7
39054 Unterinn/Ritten
Italy
info@daunenstep.it

Privacy Policy created with the Trusted Shops legal text generator in cooperation with FÖHLISCH Rechtsanwälte.